Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
File:                     NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json)
Hash identifier:          IxXpbZztopWB7B0fdR9hidTDfpYxv0lByZsJ/bsNxeo=
Subject key identifier:   7D:5A:DF:25:C3:5E:B1:E8:62:96:29:62:F2:94:53:9A:67:BA:26:24
Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
Certificate issuer:       /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
Certificate serial:       0F04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
Manifest number:          0EF8
Signing time:             Thu 24 Sep 2026 17:35:41 +0000
Manifest this update:     Thu 24 Sep 2026 17:35:40 +0000
Manifest next update:     Thu 01 Oct 2026 17:35:40 +0000
Files and hashes:         1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: 6SkqLB1M5hsX9t4D4JxjuBUno/OxMyIc9yOKi5yWSlU=)
                          2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: dp3B1RDsd11FNh3UQSta7bEw7zg/YxUAJYRv+iUtn2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl
                          rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3844 (0xf04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
        Validity
            Not Before: Sep 24 17:35:40 2026 GMT
            Not After : Oct  1 17:35:40 2026 GMT
        Subject: CN=6ab55f6c-f940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:bb:b0:ec:57:7d:9b:42:ca:67:e7:84:0d:
                    77:db:4b:73:1f:6b:6d:66:5a:22:2d:55:7f:ff:0d:
                    de:7b:85:cb:a5:f6:cb:71:bb:44:3f:01:cd:5d:94:
                    bd:dc:ca:cf:ec:f8:82:b7:c9:d9:d9:15:70:f1:e7:
                    7e:11:ec:1a:66:a1:2c:90:4a:47:45:8a:93:16:3e:
                    aa:e5:73:44:fe:70:23:bb:9b:f5:29:c0:8e:b0:97:
                    3c:a0:5f:a5:51:7f:b4:43:79:3e:fd:d4:6a:f4:8f:
                    e9:f7:95:61:5f:81:fd:6d:94:13:ab:d9:c6:e7:e1:
                    f4:84:bb:6c:d4:c8:38:ee:66:9d:f5:28:28:32:00:
                    19:78:34:83:36:65:64:78:79:f0:17:d2:2f:cc:4b:
                    78:d8:e8:65:6b:f7:01:9e:2a:78:d2:d4:f6:ff:4f:
                    04:3f:0f:d4:26:09:cd:80:6d:3b:e3:00:79:7d:fb:
                    34:86:ee:95:c0:81:bf:fe:5f:9a:bd:7c:e2:6f:1b:
                    58:00:44:f1:b9:8d:c9:74:1b:09:70:b1:00:01:f3:
                    e2:04:28:af:ae:f1:17:18:29:67:cb:ed:0c:18:f3:
                    a3:25:95:04:bb:09:e9:b9:fb:2a:77:e7:f4:73:a2:
                    ce:f1:42:e9:47:f6:94:f2:36:ba:3d:6f:e1:33:83:
                    c6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:DF:25:C3:5E:B1:E8:62:96:29:62:F2:94:53:9A:67:BA:26:24
            X509v3 Authority Key Identifier:
                keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:10:73:d9:31:2d:4c:ba:1e:05:93:e0:dd:5a:33:40:b1:bb:
         54:d7:f0:92:2e:f1:5a:b5:64:c0:fd:6c:90:55:43:ba:a8:4d:
         e2:64:68:a8:fa:88:3c:ae:4b:00:ed:0e:82:a6:2b:45:03:5e:
         70:c5:07:f4:00:83:02:16:52:c5:09:44:dc:ce:b1:47:3f:1c:
         1d:5e:e2:b1:57:38:31:bc:9a:a6:97:c8:9c:27:5e:fb:e7:73:
         02:8f:4c:eb:b1:5f:e3:56:64:72:62:53:65:df:9d:b8:bf:87:
         c7:c7:07:88:b6:e7:e1:21:5a:78:f1:5a:83:26:fe:e5:42:f6:
         01:ea:27:8e:2e:df:c2:65:a0:00:8a:66:e8:12:47:95:03:21:
         74:e5:c4:d8:c5:1c:e5:75:9b:16:f3:f4:a8:4a:52:96:7a:27:
         ee:9f:d5:77:eb:d3:10:53:a8:55:fd:56:c3:ed:23:50:38:4d:
         59:f9:a4:df:d3:db:46:dc:dc:52:56:d5:d7:4d:9a:d9:1a:53:
         34:fa:6b:c6:79:a2:5b:61:fe:44:04:5d:c9:1b:11:ec:ed:fa:
         83:a9:58:98:47:99:66:29:96:fd:2d:c7:92:34:12:68:e8:f1:
         45:d7:c6:2e:58:28:92:00:c6:27:b4:ee:2f:e0:20:8d:dc:8b:
         d4:bd:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:27:12 2026 by rpki-client